CVE-2016-0828: Exposure of Sensitive Information to an Unauthorized Actor

The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which allows attackers to obtain sensitive information, and consequently bypass an...

PT-2016-1580

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY49H Android 6.x versions prior to 2016-03-01 Description The issue exists due to the lack of initialization of a certain type of variable in the BnGraphicBufferConsumer::onTransact function. This allows a...

PT-2016-1579

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.x prior to 5.1.1 LMY49H Android versions 6.x before 2016-03-01 Description The issue exists due to the lack of initialization of a certain input data structure in the...

UBUNTU-CVE-2016-0811

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, ...

Integer overflow

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, ...

CVE-2016-0811

CVE-2016-0811 covers an integer overflow in BnCrypto::onTransact within media/libmedia/ICrypto.cpp of libmediaplayerservice on Android 6.x prior to 2016-02-01. The vulnerability can allow attackers to obtain sensitive information and bypass an unspecified protection mechanism through a improper s...

CVE-2016-0811

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, ...

CVE-2016-0811

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, ...

CVE-2016-0811: Exposure of Sensitive Information to an Unauthorized Actor

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, ...

PT-2016-1505

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-02-01 Description The issue is caused by an integer overflow in the BnCrypto::onTransact function, allowing attackers to obtain sensitive information and bypass an unspecified protection mechanism by triggering a...

Android Code Execution

The multiple vulnerabilities in the BnHDCP::onTransact function of the libstagefright library in the Android operating system are caused by buffer overflows. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code using a specially crafted application...

Integer overflow

Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug...

CVE-2015-3834

Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug...

CVE-2015-3834

Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug...

CVE-2015-3834: Undefined Security Weakness

Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug...

PT-2015-2217

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I libstagefright affected versions not specified Description The issue is caused by multiple integer overflows in the BnHDCP::onTransact function of the libstagefright library in the Android operating syste...

CVE-2015-3834

Technical details about CVE-2015-3834 are not publicly available in the provided connected documents. The initial entry describes the vulnerability but lacks corroborating specifics in the connected sources. Monitor for updates and new disclosures.

Android media integer overflow vulnerability

Google Android is an open source operating system based on Linux, mainly used in portable devices. A buffer overflow vulnerability exists in the Google Android media BnAudioPolicyService::onTransact function, which allows attackers to exploit the vulnerability to trigger a denial of service or...